Documentation ¶
Overview ¶
Package proto contains proto generated code.
Package proto is a reverse proxy.
It translates gRPC into RESTful JSON APIs.
Index ¶
- Variables
- func RegisterSigningHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error
- func RegisterSigningHandlerClient(ctx context.Context, mux *runtime.ServeMux, client SigningClient) error
- func RegisterSigningHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, ...) (err error)
- func RegisterSigningHandlerServer(ctx context.Context, mux *runtime.ServeMux, server SigningServer) error
- func RegisterSigningServer(s *grpc.Server, srv SigningServer)
- type BlobSigningRequest
- func (*BlobSigningRequest) Descriptor() ([]byte, []int)
- func (m *BlobSigningRequest) GetDigest() string
- func (m *BlobSigningRequest) GetHashAlgorithm() HashAlgo
- func (m *BlobSigningRequest) GetKeyMeta() *KeyMeta
- func (*BlobSigningRequest) ProtoMessage()
- func (m *BlobSigningRequest) Reset()
- func (m *BlobSigningRequest) String() string
- func (m *BlobSigningRequest) XXX_DiscardUnknown()
- func (m *BlobSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *BlobSigningRequest) XXX_Merge(src proto.Message)
- func (m *BlobSigningRequest) XXX_Size() int
- func (m *BlobSigningRequest) XXX_Unmarshal(b []byte) error
- type HashAlgo
- type KeyMeta
- func (*KeyMeta) Descriptor() ([]byte, []int)
- func (m *KeyMeta) GetIdentifier() string
- func (*KeyMeta) ProtoMessage()
- func (m *KeyMeta) Reset()
- func (m *KeyMeta) String() string
- func (m *KeyMeta) XXX_DiscardUnknown()
- func (m *KeyMeta) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *KeyMeta) XXX_Merge(src proto.Message)
- func (m *KeyMeta) XXX_Size() int
- func (m *KeyMeta) XXX_Unmarshal(b []byte) error
- type KeyMetas
- func (*KeyMetas) Descriptor() ([]byte, []int)
- func (m *KeyMetas) GetKeys() []*KeyMeta
- func (*KeyMetas) ProtoMessage()
- func (m *KeyMetas) Reset()
- func (m *KeyMetas) String() string
- func (m *KeyMetas) XXX_DiscardUnknown()
- func (m *KeyMetas) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *KeyMetas) XXX_Merge(src proto.Message)
- func (m *KeyMetas) XXX_Size() int
- func (m *KeyMetas) XXX_Unmarshal(b []byte) error
- type PublicKey
- func (*PublicKey) Descriptor() ([]byte, []int)
- func (m *PublicKey) GetKey() string
- func (*PublicKey) ProtoMessage()
- func (m *PublicKey) Reset()
- func (m *PublicKey) String() string
- func (m *PublicKey) XXX_DiscardUnknown()
- func (m *PublicKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *PublicKey) XXX_Merge(src proto.Message)
- func (m *PublicKey) XXX_Size() int
- func (m *PublicKey) XXX_Unmarshal(b []byte) error
- type SSHCertificateSigningRequest
- func (*SSHCertificateSigningRequest) Descriptor() ([]byte, []int)
- func (m *SSHCertificateSigningRequest) GetCriticalOptions() map[string]string
- func (m *SSHCertificateSigningRequest) GetExtensions() map[string]string
- func (m *SSHCertificateSigningRequest) GetKeyId() string
- func (m *SSHCertificateSigningRequest) GetKeyMeta() *KeyMeta
- func (m *SSHCertificateSigningRequest) GetPrincipals() []string
- func (m *SSHCertificateSigningRequest) GetPublicKey() string
- func (m *SSHCertificateSigningRequest) GetValidity() uint64
- func (*SSHCertificateSigningRequest) ProtoMessage()
- func (m *SSHCertificateSigningRequest) Reset()
- func (m *SSHCertificateSigningRequest) String() string
- func (m *SSHCertificateSigningRequest) XXX_DiscardUnknown()
- func (m *SSHCertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *SSHCertificateSigningRequest) XXX_Merge(src proto.Message)
- func (m *SSHCertificateSigningRequest) XXX_Size() int
- func (m *SSHCertificateSigningRequest) XXX_Unmarshal(b []byte) error
- type SSHKey
- func (*SSHKey) Descriptor() ([]byte, []int)
- func (m *SSHKey) GetKey() string
- func (*SSHKey) ProtoMessage()
- func (m *SSHKey) Reset()
- func (m *SSHKey) String() string
- func (m *SSHKey) XXX_DiscardUnknown()
- func (m *SSHKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *SSHKey) XXX_Merge(src proto.Message)
- func (m *SSHKey) XXX_Size() int
- func (m *SSHKey) XXX_Unmarshal(b []byte) error
- type Signature
- func (*Signature) Descriptor() ([]byte, []int)
- func (m *Signature) GetSignature() string
- func (*Signature) ProtoMessage()
- func (m *Signature) Reset()
- func (m *Signature) String() string
- func (m *Signature) XXX_DiscardUnknown()
- func (m *Signature) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Signature) XXX_Merge(src proto.Message)
- func (m *Signature) XXX_Size() int
- func (m *Signature) XXX_Unmarshal(b []byte) error
- type SigningClient
- type SigningServer
- type UnimplementedSigningServer
- func (*UnimplementedSigningServer) GetBlobAvailableSigningKeys(ctx context.Context, req *empty.Empty) (*KeyMetas, error)
- func (*UnimplementedSigningServer) GetBlobSigningKey(ctx context.Context, req *KeyMeta) (*PublicKey, error)
- func (*UnimplementedSigningServer) GetHostSSHCertificateAvailableSigningKeys(ctx context.Context, req *empty.Empty) (*KeyMetas, error)
- func (*UnimplementedSigningServer) GetHostSSHCertificateSigningKey(ctx context.Context, req *KeyMeta) (*SSHKey, error)
- func (*UnimplementedSigningServer) GetUserSSHCertificateAvailableSigningKeys(ctx context.Context, req *empty.Empty) (*KeyMetas, error)
- func (*UnimplementedSigningServer) GetUserSSHCertificateSigningKey(ctx context.Context, req *KeyMeta) (*SSHKey, error)
- func (*UnimplementedSigningServer) GetX509CACertificate(ctx context.Context, req *KeyMeta) (*X509Certificate, error)
- func (*UnimplementedSigningServer) GetX509CertificateAvailableSigningKeys(ctx context.Context, req *empty.Empty) (*KeyMetas, error)
- func (*UnimplementedSigningServer) PostHostSSHCertificate(ctx context.Context, req *SSHCertificateSigningRequest) (*SSHKey, error)
- func (*UnimplementedSigningServer) PostSignBlob(ctx context.Context, req *BlobSigningRequest) (*Signature, error)
- func (*UnimplementedSigningServer) PostUserSSHCertificate(ctx context.Context, req *SSHCertificateSigningRequest) (*SSHKey, error)
- func (*UnimplementedSigningServer) PostX509Certificate(ctx context.Context, req *X509CertificateSigningRequest) (*X509Certificate, error)
- type X509Certificate
- func (*X509Certificate) Descriptor() ([]byte, []int)
- func (m *X509Certificate) GetCert() string
- func (*X509Certificate) ProtoMessage()
- func (m *X509Certificate) Reset()
- func (m *X509Certificate) String() string
- func (m *X509Certificate) XXX_DiscardUnknown()
- func (m *X509Certificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *X509Certificate) XXX_Merge(src proto.Message)
- func (m *X509Certificate) XXX_Size() int
- func (m *X509Certificate) XXX_Unmarshal(b []byte) error
- type X509CertificateSigningRequest
- func (*X509CertificateSigningRequest) Descriptor() ([]byte, []int)
- func (m *X509CertificateSigningRequest) GetCsr() string
- func (m *X509CertificateSigningRequest) GetExtKeyUsage() []int32
- func (m *X509CertificateSigningRequest) GetKeyMeta() *KeyMeta
- func (m *X509CertificateSigningRequest) GetValidity() uint64
- func (*X509CertificateSigningRequest) ProtoMessage()
- func (m *X509CertificateSigningRequest) Reset()
- func (m *X509CertificateSigningRequest) String() string
- func (m *X509CertificateSigningRequest) XXX_DiscardUnknown()
- func (m *X509CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *X509CertificateSigningRequest) XXX_Merge(src proto.Message)
- func (m *X509CertificateSigningRequest) XXX_Size() int
- func (m *X509CertificateSigningRequest) XXX_Unmarshal(b []byte) error
Constants ¶
This section is empty.
Variables ¶
var HashAlgo_name = map[int32]string{
0: "Unspecified_Hash",
1: "SHA224",
2: "SHA256",
3: "SHA384",
4: "SHA512",
}
var HashAlgo_value = map[string]int32{
"Unspecified_Hash": 0,
"SHA224": 1,
"SHA256": 2,
"SHA384": 3,
"SHA512": 4,
}
Functions ¶
func RegisterSigningHandler ¶
func RegisterSigningHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error
RegisterSigningHandler registers the http handlers for service Signing to "mux". The handlers forward requests to the grpc endpoint over "conn".
func RegisterSigningHandlerClient ¶
func RegisterSigningHandlerClient(ctx context.Context, mux *runtime.ServeMux, client SigningClient) error
RegisterSigningHandlerClient registers the http handlers for service Signing to "mux". The handlers forward requests to the grpc endpoint over the given implementation of "SigningClient". Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "SigningClient" doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in "SigningClient" to call the correct interceptors.
func RegisterSigningHandlerFromEndpoint ¶
func RegisterSigningHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error)
RegisterSigningHandlerFromEndpoint is same as RegisterSigningHandler but automatically dials to "endpoint" and closes the connection when "ctx" gets done.
func RegisterSigningHandlerServer ¶
func RegisterSigningHandlerServer(ctx context.Context, mux *runtime.ServeMux, server SigningServer) error
RegisterSigningHandlerServer registers the http handlers for service Signing to "mux". UnaryRPC :call SigningServer directly. StreamingRPC :currently unsupported pending https://github.com/grpc/grpc-go/issues/906.
func RegisterSigningServer ¶
func RegisterSigningServer(s *grpc.Server, srv SigningServer)
Types ¶
type BlobSigningRequest ¶
type BlobSigningRequest struct { // Identifies the signing key in the PKCS#11 device used for signing the blob. KeyMeta *KeyMeta `protobuf:"bytes,1,opt,name=key_meta,json=keyMeta,proto3" json:"key_meta,omitempty"` // the hash digest of blob in base64 which will be signed. Digest string `protobuf:"bytes,2,opt,name=digest,proto3" json:"digest,omitempty"` // the algorithm of hash function used to generate the digest // https://golang.org/pkg/crypto/#Hash. HashAlgorithm HashAlgo `protobuf:"varint,3,opt,name=hash_algorithm,json=hashAlgorithm,proto3,enum=v3.HashAlgo" json:"hash_algorithm,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
func (*BlobSigningRequest) Descriptor ¶
func (*BlobSigningRequest) Descriptor() ([]byte, []int)
func (*BlobSigningRequest) GetDigest ¶
func (m *BlobSigningRequest) GetDigest() string
func (*BlobSigningRequest) GetHashAlgorithm ¶
func (m *BlobSigningRequest) GetHashAlgorithm() HashAlgo
func (*BlobSigningRequest) GetKeyMeta ¶
func (m *BlobSigningRequest) GetKeyMeta() *KeyMeta
func (*BlobSigningRequest) ProtoMessage ¶
func (*BlobSigningRequest) ProtoMessage()
func (*BlobSigningRequest) Reset ¶
func (m *BlobSigningRequest) Reset()
func (*BlobSigningRequest) String ¶
func (m *BlobSigningRequest) String() string
func (*BlobSigningRequest) XXX_DiscardUnknown ¶
func (m *BlobSigningRequest) XXX_DiscardUnknown()
func (*BlobSigningRequest) XXX_Marshal ¶
func (m *BlobSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*BlobSigningRequest) XXX_Merge ¶
func (m *BlobSigningRequest) XXX_Merge(src proto.Message)
func (*BlobSigningRequest) XXX_Size ¶
func (m *BlobSigningRequest) XXX_Size() int
func (*BlobSigningRequest) XXX_Unmarshal ¶
func (m *BlobSigningRequest) XXX_Unmarshal(b []byte) error
type KeyMeta ¶
type KeyMeta struct { // The id of the key that will be used in crypto operations. Identifier string `protobuf:"bytes,1,opt,name=identifier,proto3" json:"identifier,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
KeyMeta identifies the private key used in crypto operations.
func (*KeyMeta) Descriptor ¶
func (*KeyMeta) GetIdentifier ¶
func (*KeyMeta) ProtoMessage ¶
func (*KeyMeta) ProtoMessage()
func (*KeyMeta) XXX_DiscardUnknown ¶
func (m *KeyMeta) XXX_DiscardUnknown()
func (*KeyMeta) XXX_Marshal ¶
func (*KeyMeta) XXX_Unmarshal ¶
type KeyMetas ¶
type KeyMetas struct { Keys []*KeyMeta `protobuf:"bytes,1,rep,name=keys,proto3" json:"keys,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
KeyMetas contains a list of KeyMetas.
func (*KeyMetas) Descriptor ¶
func (*KeyMetas) ProtoMessage ¶
func (*KeyMetas) ProtoMessage()
func (*KeyMetas) XXX_DiscardUnknown ¶
func (m *KeyMetas) XXX_DiscardUnknown()
func (*KeyMetas) XXX_Marshal ¶
func (*KeyMetas) XXX_Unmarshal ¶
type PublicKey ¶
type PublicKey struct { // The encoded string of the public key. Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
PublicKey is a encoded string of the public key specified by users.
func (*PublicKey) Descriptor ¶
func (*PublicKey) ProtoMessage ¶
func (*PublicKey) ProtoMessage()
func (*PublicKey) XXX_DiscardUnknown ¶
func (m *PublicKey) XXX_DiscardUnknown()
func (*PublicKey) XXX_Marshal ¶
func (*PublicKey) XXX_Unmarshal ¶
type SSHCertificateSigningRequest ¶
type SSHCertificateSigningRequest struct { // Identifies the signing key in the HSM used for signing the certificate. KeyMeta *KeyMeta `protobuf:"bytes,1,opt,name=key_meta,json=keyMeta,proto3" json:"key_meta,omitempty"` // List of usernames or hostnames in the Principals field. Principals []string `protobuf:"bytes,2,rep,name=principals,proto3" json:"principals,omitempty"` // SSH public key. PublicKey string `protobuf:"bytes,3,opt,name=public_key,json=publicKey,proto3" json:"public_key,omitempty"` // Validity period of the certificate in seconds. Validity uint64 `protobuf:"varint,4,opt,name=validity,proto3" json:"validity,omitempty"` // Key ID in the certificate. KeyId string `protobuf:"bytes,5,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"` // Critical Options field in the certificate. CriticalOptions map[string]string `` /* 194-byte string literal not displayed */ // Extensions field in the certificate. Extensions map[string]string `` /* 161-byte string literal not displayed */ XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
SSHCertificateSigningRequest specifies the info used for signing an SSH certificate.
func (*SSHCertificateSigningRequest) Descriptor ¶
func (*SSHCertificateSigningRequest) Descriptor() ([]byte, []int)
func (*SSHCertificateSigningRequest) GetCriticalOptions ¶
func (m *SSHCertificateSigningRequest) GetCriticalOptions() map[string]string
func (*SSHCertificateSigningRequest) GetExtensions ¶
func (m *SSHCertificateSigningRequest) GetExtensions() map[string]string
func (*SSHCertificateSigningRequest) GetKeyId ¶
func (m *SSHCertificateSigningRequest) GetKeyId() string
func (*SSHCertificateSigningRequest) GetKeyMeta ¶
func (m *SSHCertificateSigningRequest) GetKeyMeta() *KeyMeta
func (*SSHCertificateSigningRequest) GetPrincipals ¶
func (m *SSHCertificateSigningRequest) GetPrincipals() []string
func (*SSHCertificateSigningRequest) GetPublicKey ¶
func (m *SSHCertificateSigningRequest) GetPublicKey() string
func (*SSHCertificateSigningRequest) GetValidity ¶
func (m *SSHCertificateSigningRequest) GetValidity() uint64
func (*SSHCertificateSigningRequest) ProtoMessage ¶
func (*SSHCertificateSigningRequest) ProtoMessage()
func (*SSHCertificateSigningRequest) Reset ¶
func (m *SSHCertificateSigningRequest) Reset()
func (*SSHCertificateSigningRequest) String ¶
func (m *SSHCertificateSigningRequest) String() string
func (*SSHCertificateSigningRequest) XXX_DiscardUnknown ¶
func (m *SSHCertificateSigningRequest) XXX_DiscardUnknown()
func (*SSHCertificateSigningRequest) XXX_Marshal ¶
func (m *SSHCertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*SSHCertificateSigningRequest) XXX_Merge ¶
func (m *SSHCertificateSigningRequest) XXX_Merge(src proto.Message)
func (*SSHCertificateSigningRequest) XXX_Size ¶
func (m *SSHCertificateSigningRequest) XXX_Size() int
func (*SSHCertificateSigningRequest) XXX_Unmarshal ¶
func (m *SSHCertificateSigningRequest) XXX_Unmarshal(b []byte) error
type SSHKey ¶
type SSHKey struct { // The encoded string of the SSH key. Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
SSHKey specifies an SSH key that can either be an: 1. SSH public key, or 2. SSH user/host certificate
func (*SSHKey) Descriptor ¶
func (*SSHKey) ProtoMessage ¶
func (*SSHKey) ProtoMessage()
func (*SSHKey) XXX_DiscardUnknown ¶
func (m *SSHKey) XXX_DiscardUnknown()
func (*SSHKey) XXX_Marshal ¶
func (*SSHKey) XXX_Unmarshal ¶
type Signature ¶
type Signature struct { Signature string `protobuf:"bytes,1,opt,name=signature,proto3" json:"signature,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
Signature is a base64 encoded result of signing a blob.
func (*Signature) Descriptor ¶
func (*Signature) GetSignature ¶
func (*Signature) ProtoMessage ¶
func (*Signature) ProtoMessage()
func (*Signature) XXX_DiscardUnknown ¶
func (m *Signature) XXX_DiscardUnknown()
func (*Signature) XXX_Marshal ¶
func (*Signature) XXX_Unmarshal ¶
type SigningClient ¶
type SigningClient interface { // GetX509CertificateAvailableSigningKeys returns all available keys that can sign X509 certificates. GetX509CertificateAvailableSigningKeys(ctx context.Context, in *empty.Empty, opts ...grpc.CallOption) (*KeyMetas, error) // GetX509CACertificate returns the CA X509 certificate self-signed by the specified key. GetX509CACertificate(ctx context.Context, in *KeyMeta, opts ...grpc.CallOption) (*X509Certificate, error) // PostX509Certificate signs the given CSR using the specified key and returns a PEM encoded X509 certificate. PostX509Certificate(ctx context.Context, in *X509CertificateSigningRequest, opts ...grpc.CallOption) (*X509Certificate, error) // GetUserSSHCertificateAvailableSigningKeys returns all available keys that can sign user SSH certificates. GetUserSSHCertificateAvailableSigningKeys(ctx context.Context, in *empty.Empty, opts ...grpc.CallOption) (*KeyMetas, error) // GetUserSSHCertificateSigningKey returns the public signing key of the // specified key that signs the user ssh certificate. GetUserSSHCertificateSigningKey(ctx context.Context, in *KeyMeta, opts ...grpc.CallOption) (*SSHKey, error) // PostUserSSHCertificate signs the SSH user certificate given request fields using the specified key. PostUserSSHCertificate(ctx context.Context, in *SSHCertificateSigningRequest, opts ...grpc.CallOption) (*SSHKey, error) // GetHostSSHCertificateAvailableSigningKeys returns all available keys that can sign host SSH certificates. GetHostSSHCertificateAvailableSigningKeys(ctx context.Context, in *empty.Empty, opts ...grpc.CallOption) (*KeyMetas, error) // GetHostSSHCertificateSigningKey returns the public signing key of the // specified key that signs the host ssh certificate. GetHostSSHCertificateSigningKey(ctx context.Context, in *KeyMeta, opts ...grpc.CallOption) (*SSHKey, error) // PostHostSSHCertificate signs the SSH host certificate given request fields using the specified key. PostHostSSHCertificate(ctx context.Context, in *SSHCertificateSigningRequest, opts ...grpc.CallOption) (*SSHKey, error) // GetBlobAvailableSigningKeys returns all available keys that can sign GetBlobAvailableSigningKeys(ctx context.Context, in *empty.Empty, opts ...grpc.CallOption) (*KeyMetas, error) // GetBlobSigningKey returns the public signing key of the // specified key that signs the user's data. GetBlobSigningKey(ctx context.Context, in *KeyMeta, opts ...grpc.CallOption) (*PublicKey, error) // PostSignBlob signs the digest using the specified key. PostSignBlob(ctx context.Context, in *BlobSigningRequest, opts ...grpc.CallOption) (*Signature, error) }
SigningClient is the client API for Signing service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
func NewSigningClient ¶
func NewSigningClient(cc grpc.ClientConnInterface) SigningClient
type SigningServer ¶
type SigningServer interface { // GetX509CertificateAvailableSigningKeys returns all available keys that can sign X509 certificates. GetX509CertificateAvailableSigningKeys(context.Context, *empty.Empty) (*KeyMetas, error) // GetX509CACertificate returns the CA X509 certificate self-signed by the specified key. GetX509CACertificate(context.Context, *KeyMeta) (*X509Certificate, error) // PostX509Certificate signs the given CSR using the specified key and returns a PEM encoded X509 certificate. PostX509Certificate(context.Context, *X509CertificateSigningRequest) (*X509Certificate, error) // GetUserSSHCertificateAvailableSigningKeys returns all available keys that can sign user SSH certificates. GetUserSSHCertificateAvailableSigningKeys(context.Context, *empty.Empty) (*KeyMetas, error) // GetUserSSHCertificateSigningKey returns the public signing key of the // specified key that signs the user ssh certificate. GetUserSSHCertificateSigningKey(context.Context, *KeyMeta) (*SSHKey, error) // PostUserSSHCertificate signs the SSH user certificate given request fields using the specified key. PostUserSSHCertificate(context.Context, *SSHCertificateSigningRequest) (*SSHKey, error) // GetHostSSHCertificateAvailableSigningKeys returns all available keys that can sign host SSH certificates. GetHostSSHCertificateAvailableSigningKeys(context.Context, *empty.Empty) (*KeyMetas, error) // GetHostSSHCertificateSigningKey returns the public signing key of the // specified key that signs the host ssh certificate. GetHostSSHCertificateSigningKey(context.Context, *KeyMeta) (*SSHKey, error) // PostHostSSHCertificate signs the SSH host certificate given request fields using the specified key. PostHostSSHCertificate(context.Context, *SSHCertificateSigningRequest) (*SSHKey, error) // GetBlobAvailableSigningKeys returns all available keys that can sign GetBlobAvailableSigningKeys(context.Context, *empty.Empty) (*KeyMetas, error) // GetBlobSigningKey returns the public signing key of the // specified key that signs the user's data. GetBlobSigningKey(context.Context, *KeyMeta) (*PublicKey, error) // PostSignBlob signs the digest using the specified key. PostSignBlob(context.Context, *BlobSigningRequest) (*Signature, error) }
SigningServer is the server API for Signing service.
type UnimplementedSigningServer ¶
type UnimplementedSigningServer struct { }
UnimplementedSigningServer can be embedded to have forward compatible implementations.
func (*UnimplementedSigningServer) GetBlobAvailableSigningKeys ¶
func (*UnimplementedSigningServer) GetBlobSigningKey ¶
func (*UnimplementedSigningServer) GetHostSSHCertificateAvailableSigningKeys ¶
func (*UnimplementedSigningServer) GetHostSSHCertificateSigningKey ¶
func (*UnimplementedSigningServer) GetUserSSHCertificateAvailableSigningKeys ¶
func (*UnimplementedSigningServer) GetUserSSHCertificateSigningKey ¶
func (*UnimplementedSigningServer) GetX509CACertificate ¶
func (*UnimplementedSigningServer) GetX509CACertificate(ctx context.Context, req *KeyMeta) (*X509Certificate, error)
func (*UnimplementedSigningServer) GetX509CertificateAvailableSigningKeys ¶
func (*UnimplementedSigningServer) PostHostSSHCertificate ¶
func (*UnimplementedSigningServer) PostHostSSHCertificate(ctx context.Context, req *SSHCertificateSigningRequest) (*SSHKey, error)
func (*UnimplementedSigningServer) PostSignBlob ¶
func (*UnimplementedSigningServer) PostSignBlob(ctx context.Context, req *BlobSigningRequest) (*Signature, error)
func (*UnimplementedSigningServer) PostUserSSHCertificate ¶
func (*UnimplementedSigningServer) PostUserSSHCertificate(ctx context.Context, req *SSHCertificateSigningRequest) (*SSHKey, error)
func (*UnimplementedSigningServer) PostX509Certificate ¶
func (*UnimplementedSigningServer) PostX509Certificate(ctx context.Context, req *X509CertificateSigningRequest) (*X509Certificate, error)
type X509Certificate ¶
type X509Certificate struct { // The X509 certificate encoded in PEM format. Cert string `protobuf:"bytes,1,opt,name=cert,proto3" json:"cert,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
X509Certificate specifies an X509 certificate.
func (*X509Certificate) Descriptor ¶
func (*X509Certificate) Descriptor() ([]byte, []int)
func (*X509Certificate) GetCert ¶
func (m *X509Certificate) GetCert() string
func (*X509Certificate) ProtoMessage ¶
func (*X509Certificate) ProtoMessage()
func (*X509Certificate) Reset ¶
func (m *X509Certificate) Reset()
func (*X509Certificate) String ¶
func (m *X509Certificate) String() string
func (*X509Certificate) XXX_DiscardUnknown ¶
func (m *X509Certificate) XXX_DiscardUnknown()
func (*X509Certificate) XXX_Marshal ¶
func (m *X509Certificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*X509Certificate) XXX_Merge ¶
func (m *X509Certificate) XXX_Merge(src proto.Message)
func (*X509Certificate) XXX_Size ¶
func (m *X509Certificate) XXX_Size() int
func (*X509Certificate) XXX_Unmarshal ¶
func (m *X509Certificate) XXX_Unmarshal(b []byte) error
type X509CertificateSigningRequest ¶
type X509CertificateSigningRequest struct { // Identifies the signing key in the HSM used for signing the certificate. KeyMeta *KeyMeta `protobuf:"bytes,1,opt,name=key_meta,json=keyMeta,proto3" json:"key_meta,omitempty"` // X509 certificate signing request encoded in PEM format. Csr string `protobuf:"bytes,2,opt,name=csr,proto3" json:"csr,omitempty"` // Validity period of the certificate in seconds. Validity uint64 `protobuf:"varint,3,opt,name=validity,proto3" json:"validity,omitempty"` // X509 certificate ExtKeyUsage. // https://godoc.org/crypto/x509#ExtKeyUsage ExtKeyUsage []int32 `protobuf:"varint,4,rep,packed,name=ext_key_usage,json=extKeyUsage,proto3" json:"ext_key_usage,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
X509CertificateSigningRequest specifies the info used for signing an X509 certificate.
func (*X509CertificateSigningRequest) Descriptor ¶
func (*X509CertificateSigningRequest) Descriptor() ([]byte, []int)
func (*X509CertificateSigningRequest) GetCsr ¶
func (m *X509CertificateSigningRequest) GetCsr() string
func (*X509CertificateSigningRequest) GetExtKeyUsage ¶
func (m *X509CertificateSigningRequest) GetExtKeyUsage() []int32
func (*X509CertificateSigningRequest) GetKeyMeta ¶
func (m *X509CertificateSigningRequest) GetKeyMeta() *KeyMeta
func (*X509CertificateSigningRequest) GetValidity ¶
func (m *X509CertificateSigningRequest) GetValidity() uint64
func (*X509CertificateSigningRequest) ProtoMessage ¶
func (*X509CertificateSigningRequest) ProtoMessage()
func (*X509CertificateSigningRequest) Reset ¶
func (m *X509CertificateSigningRequest) Reset()
func (*X509CertificateSigningRequest) String ¶
func (m *X509CertificateSigningRequest) String() string
func (*X509CertificateSigningRequest) XXX_DiscardUnknown ¶
func (m *X509CertificateSigningRequest) XXX_DiscardUnknown()
func (*X509CertificateSigningRequest) XXX_Marshal ¶
func (m *X509CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*X509CertificateSigningRequest) XXX_Merge ¶
func (m *X509CertificateSigningRequest) XXX_Merge(src proto.Message)
func (*X509CertificateSigningRequest) XXX_Size ¶
func (m *X509CertificateSigningRequest) XXX_Size() int
func (*X509CertificateSigningRequest) XXX_Unmarshal ¶
func (m *X509CertificateSigningRequest) XXX_Unmarshal(b []byte) error